$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: ZP4iqL0rpnp9iaLYqMi/RoxBwqKoo8vSrNmCwAWTW3U= Subject key identifier: 2F:A4:02:04:7A:09:8C:FE:5E:20:4B:4B:15:7C:E2:D1:A9:28:F6:31 Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 057F Signing time: Sun 15 Jun 2025 00:04:30 +0000 Manifest this update: Sun 15 Jun 2025 00:04:30 +0000 Manifest next update: Sun 22 Jun 2025 00:04:30 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: K18Vn5Y5zcAN3n0qL3uovlKFd5r2jY5l+oNqFqVmjrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: Jun 15 00:04:30 2025 GMT Not After : Jun 22 00:04:30 2025 GMT Subject: CN=684e0e0e-ef49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:9d:fc:cc:b2:56:7b:93:88:87:15:61:b6: aa:d7:9f:5c:ac:48:dc:00:50:82:42:5b:7b:d8:f8: 65:37:ba:aa:6e:4a:9b:cc:a8:42:05:da:15:a0:cc: 55:9d:de:d2:a7:97:f0:00:55:17:b7:a1:c3:e2:ec: de:68:53:21:5a:2f:a1:a6:69:73:db:ce:3c:f8:98: f1:6e:22:bb:01:1a:87:40:4f:ae:d6:ae:f4:6b:c7: 4f:62:00:88:dd:31:58:5e:ab:93:e2:02:8a:9c:e3: 27:24:bc:43:12:7a:cf:30:79:e1:04:dc:bf:d6:36: 9a:5f:9b:0c:2b:cc:7e:26:83:09:de:32:3e:58:2c: 28:1e:68:4a:63:17:5b:56:35:ef:86:9e:8f:f5:bf: 9b:8f:ff:1d:f4:38:a7:7a:50:4c:62:51:40:fe:b0: 2b:da:fe:c5:49:80:ec:1e:55:a0:ee:9c:8d:4c:c7: 77:26:35:97:8e:95:c1:a2:b9:7c:6c:3e:77:d9:52: aa:21:84:fe:c5:8d:33:5d:44:e1:bf:37:cf:57:4d: bb:f2:9d:0f:d5:27:68:a2:f3:d7:0c:89:61:e0:48: 98:2d:8f:45:72:90:3d:94:89:cb:58:da:11:bb:d4: 8b:7b:bf:49:a0:10:f5:9f:89:27:fa:3a:43:77:95: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A4:02:04:7A:09:8C:FE:5E:20:4B:4B:15:7C:E2:D1:A9:28:F6:31 X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:71:fb:2c:35:3f:8f:ff:ae:26:33:2e:99:67:f2:bb:51:d3: 41:95:16:ba:f0:da:4e:77:f4:8d:d4:96:b5:8c:56:c3:43:4c: 60:d5:cb:ac:77:96:0c:ca:a4:4a:12:b8:4c:ca:30:df:e7:7a: fd:d1:dc:1d:fd:1c:41:c2:88:dd:76:53:4e:64:43:66:e8:1e: c0:80:c9:84:ed:06:9e:fe:c2:b8:bb:2b:24:29:4e:a2:fb:51: 11:40:84:35:42:25:c7:09:08:97:31:18:3e:57:ac:f5:dc:e0: b9:6d:12:80:75:c3:4c:5d:f6:5d:d1:93:de:93:83:df:9a:f6: 80:83:e5:e0:c5:69:33:29:2f:6e:13:76:77:03:37:df:59:77: 5b:9b:e0:8f:cf:aa:83:77:c4:40:62:b3:f0:ea:79:20:02:a2: 4f:f6:90:51:27:0b:2d:74:b6:1f:e5:d5:c3:70:f3:8f:56:29: 38:b0:f2:fa:7f:73:24:03:0a:f8:49:eb:da:3c:78:7b:8a:88: a7:8f:c8:fb:fb:92:85:3d:34:d2:de:2d:1b:3c:25:5d:c8:c5: c2:89:35:a3:55:d5:b2:f9:ac:d9:b9:ee:e7:ee:56:78:bb:78: 9b:8c:17:5b:f8:96:10:e9:3d:a5:2b:ae:06:76:d3:2b:d2:08: 17:4c:e1:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjUwNjE1MDAwNDMwWhcNMjUwNjIyMDAwNDMwWjAYMRYwFAYD VQQDEw02ODRlMGUwZS1lZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMyd/MyyVnuTiIcVYbaq159crEjcAFCCQlt72PhlN7qqbkqbzKhCBdoVoMxV nd7Sp5fwAFUXt6HD4uzeaFMhWi+hpmlz2848+JjxbiK7ARqHQE+u1q70a8dPYgCI 3TFYXquT4gKKnOMnJLxDEnrPMHnhBNy/1jaaX5sMK8x+JoMJ3jI+WCwoHmhKYxdb VjXvhp6P9b+bj/8d9DinelBMYlFA/rAr2v7FSYDsHlWg7pyNTMd3JjWXjpXBorl8 bD532VKqIYT+xY0zXUThvzfPV0278p0P1SdoovPXDIlh4EiYLY9FcpA9lInLWNoR u9SLe79JoBD1n4kn+jpDd5UiXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+kAgR6 CYz+XiBLSxV84tGpKPYxMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6cfssNT+P/64mMy6ZZ/K7UdNBlRa68NpOd/SN1Ja1jFbDQ0xg1cus d5YMyqRKErhMyjDf53r90dwd/RxBwojddlNOZENm6B7AgMmE7Qae/sK4uyskKU6i +1ERQIQ1QiXHCQiXMRg+V6z13OC5bRKAdcNMXfZd0ZPek4PfmvaAg+XgxWkzKS9u E3Z3AzffWXdbm+CPz6qDd8RAYrPw6nkgAqJP9pBRJwstdLYf5dXDcPOPVik4sPL6 f3MkAwr4SevaPHh7ioinj8j7+5KFPTTS3i0bPCVdyMXCiTWjVdWy+azZue7n7lZ4 u3ibjBdb+JYQ6T2lK64GdtMr0ggXTOF1 -----END CERTIFICATE-----Generated at Sun Jun 15 09:42:46 2025 by rpki-client